Cops Now Need a Warrant for 23andMe and AncestryDNA Searches in Maryland and Montana

Two states have passed laws requiring court approval before the cops can use genetic genealogy services to track down a suspect.


Maryland and Montana have become the first states to pass laws restricting the ways law enforcement can access DNA databases from private genetic genealogy companies such as AncestryDNA and 23andMe.

Maryland's law, passed on May 30, requires police to have court authorization before beginning an investigation using information from such companies. To get this authorization, they must have probable cause—and the crime being probed must be a murder, a rape, a felony sexual offense, or a "criminal act involving circumstances presenting a substantial and ongoing threat to public safety or national security."

Montana's similar but less robust law, passed on May 7, says the government "may not obtain DNA search results from a consumer DNA database" unless it has "a search warrant issued by a court on a finding of probable cause" or if the consumer whose information is sought waived their right to privacy.

As many as 26 million people have used genetic genealogy services. Police have secretly used DNA information from these companies without a warrant or subpoena.

Law enforcement agencies caught the Golden State Killer and more than a dozen other suspects by sending in DNA evidence from crime scenes under a fake profile, as though the investigator was an ordinary user. This process gives them a list of a suspect's genetic relations, possibly allowing police to triangulate their identity.

AncestryDNA and 23andMe both prohibit such investigations using an ordinary user profile. But other companies, such as FamilyTreeDNA and GEDMatch, have indicated that they allow police to use their databases, even without court approval. GEDMatch was the service used in the Golden State Killer case; after the murderer was captured, the company addressed the news with a banner at the top of its website. "Although we were not approached by law enforcement or anyone else about this case or about the DNA," it said, "it has always been GEDmatch's policy to inform users that the database could be used for other uses, as set forth in the Site Policy….While the database was created for genealogical research, it is important that GEDmatch participants understand the possible uses of their DNA, including identification of relatives that have committed crimes or were victims of crimes."

Of all of the direct-to-consumer genetic genealogy companies, GEDMatch is the most amenable to law enforcement. And although it has one of the smaller databases, a 2018 study in Science found that if you are a white American—the most highly represented group in these databases—there's a 60 percent chance that your identity could be discovered using a search of your DNA on the site. All it takes is a third cousin who has uploaded his or her DNA to let law enforcement home in on who you are. And those chances have likely increased, as the database has grown since 2018.

The "language of the Fourth Amendment, which requires probable cause for every search and particularity for every warrant, precludes dragnet warrantless searches like these," argues Jennifer Lynch of the Electronic Frontier Foundation. "A technique's usefulness for law enforcement does not outweigh people's privacy interests in their genetic data." 

As genetic genealogy websites become increasingly popular, DNA privacy becomes increasingly important. Let's hope other states follow Montana and Maryland's lead to keep the government's genetic snoops within their constitutional bounds.

This piece has been updated to reflect changes in which crimes are affected by Maryland's law.

NEXT: Cops Tased and Beat Teens While Enforcing a Local Vaping Ban

Editor's Note: We invite comments and request that they be civil and on-topic. We do not moderate or assume any responsibility for comments, which are owned by the readers who post them. Comments do not represent the views of or Reason Foundation. We reserve the right to delete any comment for any reason at any time. Report abuses.

  1. For starters, most healthy people want a job that satisfies their needs, but a job without a social support system can set individuals up for failure, and can …………CLICK HERE.

    1. Making money online more than 15$ just by doing simple work from home. I have received $18376 last month. Its an easy and simple job to do and its earnings aredd much better than regular office job and even a little child can do this and earns money. Everybody must try this job by just use the info
      on this page…..VISIT HERE

  2. You can’t just lower tax rates on the wealthy and expect jobs to be created. … How are they going to pay for the laptop, car, and gas they need to find a job…………PART TIME JOB.

  3. This could prevent us from identifying a psychotic woman who’s 1/1024th native american.

    1. or whether Webb Hubbell is Chelsea’s dad.

      1. It certainly explains the dumb drooling look on Chelsea’s face.

  4. Do you nèed a warrant to run fingerprint searches? Or use mugbooks? Or run license plates? What is the big deal?

    1. Last I checked, my second cousin’s decision to submit his fingerprints to the FBI did not interfere with my right to stay out of their databases. The same cannot be said of genetic testing.

  5. The funny thing is I am sure I just read several Reason articles about how the government forcing private companies to abide the 1st amendment is tyranny.

  6. zero expectation of privacy leaving dna @crime scene.

  7. No one actually owns their DNA. It is a shared resource with all of their relatives.
    If I refuse to give consent to search commercial DNA databases, enough of my relatives can give consent, and I can be found just as easily.

    Another reason for small families?

  8. I’d never use one of those sites. If my forebears hadn’t been criminals, I’d never have been born. Nor my siblings, cousins, etc.
    Survival is a crime.

  9. LOL! Warrants are as easy to get as a grand jury indictment. Maybe easier.

  10. Meh, if you haven’t done anything wrong you don’t have anything to worry about. Amiright?

Please to post comments

Comments are closed.